On 2020-09-27, GCash suffered a kms misconfiguration incident resulting in approximately $24,504,941 in losses. The exploit targeted the infrastructure layer. Attribution: unknown. This is a demonstration entry — not a real incident.
Matches the supply chain npm predicate
Matches the dvn collapse predicate
Matches the kms misconfiguration predicate
Matches the governance proposal malicious predicate
kms_provider = aws_kmsfrontend_host = aws_s3subsector_tags = infra_tooling, consumer_appmethod_b_root_causes = dvn_collapsekms_provider = aws_kmssubsector_tags = infra_tooling, consumer_app, general_defimethod_b_root_causes = kms_misconfigurationkms_provider = aws_kmssubsector_tags = general_defi, consumer_app, infra_toolingmethod_b_root_causes = kms_misconfigurationkms_provider = aws_kmssubsector_tags = infra_tooling, general_defi, consumer_appmethod_b_root_causes = supply_chain_npmkms_provider = aws_kmsfrontend_host = aws_s3subsector_tags = general_defi, infra_toolingmethod_b_root_causes = kms_misconfigurationfrontend_host = aws_s3subsector_tags = infra_tooling, consumer_app, general_defimethod_b_root_causes = supply_chain_npmfrontend_host = aws_s3subsector_tags = infra_tooling, consumer_app, general_defimethod_b_root_causes = dvn_collapsekms_provider = aws_kmssubsector_tags = infra_tooling, general_defi, consumer_appmethod_b_root_causes = dvn_collapsekms_provider = aws_kmssubsector_tags = consumer_app, infra_tooling, general_defimethod_b_root_causes = kms_misconfigurationkms_provider = aws_kmssubsector_tags = general_defi, infra_toolingmethod_b_root_causes = kms_misconfiguration